dépôts
/
lhc
/
web
/
wiklou.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
28cf457
)
SECURITY: Do not allow user scripts on Special:PasswordReset
author
Amir Sarabadani
<Ladsgroup@gmail.com>
Sat, 7 Dec 2019 22:36:42 +0000
(23:36 +0100)
committer
SBassett
<sbassett@wikimedia.org>
Mon, 9 Dec 2019 22:51:36 +0000
(22:51 +0000)
Bug: T192134
Change-Id: If5e91452f2e569476626bcf650ba4efaa122952c
includes/specials/SpecialPasswordReset.php
patch
|
blob
|
history
diff --git
a/includes/specials/SpecialPasswordReset.php
b/includes/specials/SpecialPasswordReset.php
index
84292f3
..
51fcae7
100644
(file)
--- a/
includes/specials/SpecialPasswordReset.php
+++ b/
includes/specials/SpecialPasswordReset.php
@@
-74,6
+74,15
@@
class SpecialPasswordReset extends FormSpecialPage {
parent::checkExecutePermissions( $user );
}
+ /**
+ * @param string $par
+ */
+ public function execute( $par ) {
+ $out = $this->getOutput();
+ $out->disallowUserJs();
+ parent::execute( $par );
+ }
+
protected function getFormFields() {
$resetRoutes = $this->getConfig()->get( 'PasswordResetRoutes' );
$a = [];